Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/691e0e20-ceef-3b29-8cec-05ac418a0d42.roa
File:                     691e0e20-ceef-3b29-8cec-05ac418a0d42.roa (raw, json)
Hash identifier:          NZgT2G3Zj+aPtAs/jQZkFPks/C5ObetouDbYtpxwv2Y=
Subject key identifier:   A2:97:BE:9B:95:95:C2:03:45:D6:9E:4D:26:98:D7:11:75:72:30:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F2D87E2E9F89F928A178F9D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/691e0e20-ceef-3b29-8cec-05ac418a0d42.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     397204
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:e2:e9:f8:9f:92:8a:17:8f:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=a47c25e6-1995-4a28-a285-fa2b8a13201a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:64:0b:c1:11:28:5a:e3:cb:25:78:c4:d0:8a:
                    a2:92:31:d6:e8:dd:60:2e:26:6e:7c:d0:b0:55:cf:
                    40:0f:d0:ce:73:14:80:88:e7:8f:ad:3f:84:6e:92:
                    27:23:66:f0:ba:5c:21:c0:ac:b9:71:8b:9a:a9:6d:
                    fa:60:7a:ba:f0:9e:86:76:97:5d:38:03:93:7f:40:
                    ef:89:2c:22:09:4e:a2:f3:61:b1:42:77:39:61:7d:
                    9b:95:5b:9d:a0:d1:6d:4b:e0:22:56:a0:90:1c:30:
                    a3:08:9a:7d:43:28:85:46:43:52:6b:d3:a1:b6:65:
                    93:95:cf:f2:75:00:98:f4:75:48:24:a7:8b:ab:78:
                    76:7e:6e:0a:d2:02:b9:dd:40:47:67:2d:f1:ef:7c:
                    bf:fe:0d:12:6d:f0:c3:fb:d4:73:a5:98:5e:aa:30:
                    39:ac:71:44:a7:3b:62:66:8c:d1:08:c2:07:25:6b:
                    ae:51:77:64:56:83:cd:c5:52:d2:11:8b:06:b8:58:
                    c1:97:e4:3d:69:57:78:d4:f2:62:e7:58:1b:6a:41:
                    e4:62:b4:6c:f8:90:50:68:52:97:3b:27:26:b6:bc:
                    ab:47:cb:66:c7:e8:c2:cb:b0:e5:27:0f:ae:a5:82:
                    54:a1:cf:50:76:26:55:14:93:36:22:c8:32:54:94:
                    d8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:97:BE:9B:95:95:C2:03:45:D6:9E:4D:26:98:D7:11:75:72:30:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/691e0e20-ceef-3b29-8cec-05ac418a0d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5c:df:45:94:ff:a4:0d:c8:b2:e1:e1:84:01:03:fb:a1:b0:
         09:09:17:e3:48:84:72:0f:2e:4a:db:41:2d:e4:20:7f:4d:05:
         f7:40:9d:c2:22:e4:01:d2:a0:45:1d:a1:44:65:e8:de:23:8c:
         87:4d:35:c6:66:ff:2e:40:7c:f0:e8:d1:e0:4f:05:6b:ed:fc:
         04:f8:02:33:a8:72:99:f9:30:b9:ae:80:fb:a1:a1:b0:d1:54:
         43:77:b7:22:47:bb:e9:1d:7a:8b:74:bd:aa:8f:ee:fa:44:54:
         0d:01:bf:4c:e6:c6:76:5f:24:cb:4b:a6:3b:38:21:8c:c7:8b:
         95:d0:90:12:8a:9b:20:9b:ec:a4:37:6c:40:77:f1:2b:44:00:
         6e:90:4b:44:4a:5c:4d:d2:e9:20:79:07:3f:9f:a7:c8:09:c4:
         72:d3:ed:8a:2d:1a:85:b0:00:6a:3c:00:18:e3:68:bd:42:db:
         3c:95:20:23:42:63:aa:a1:4e:91:4e:41:40:aa:68:3e:97:a9:
         28:b0:56:99:f5:58:01:52:f7:73:74:63:87:6e:ce:c6:97:9e:
         09:a8:da:1c:f7:f0:b4:c9:35:8c:ce:0d:d9:b2:42:88:36:74:
         bd:26:2f:dc:b7:1d:95:78:3c:95:f2:59:d6:63:96:91:bb:91:
         d6:6a:03:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:07:03 2026 by rpki-client